Security
How your rs.ge access is protected.
[PLACEHOLDER: this draft has not had a legal review. It describes what the software does and is replaced before launch.]
Your login
Your rs.ge password is encrypted on our server. It is never shown anywhere and never written to a log.
When your rs.ge account asks for an SMS code at sign-in, we ask you for it; we cannot read it ourselves.
If you would rather not share your main login, choose limited access: a sub-user you create in rs.ge and can delete at any time.
Approval and the activity log
Declarations, waybills, invoices and certificate requests are prepared first and sent only after you approve them. Every action is written to your activity log, which you can read in the dashboard.
Sign-in
You sign in to the dashboard with a link sent to your email. A link works once and expires after 15 minutes. A session lasts a day.
Reporting a problem
If you find a security problem, write to hello@kvitiko.ge. [SECURITY CONTACT AND DISCLOSURE POLICY: to be completed.]